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What is claimed: 

1 . A method of doing business subject to a risk event comprising the steps of: 

providing questions to solicit answers that define attributes of the risk event; 

obtaining the answers to the questions; 

5 inputting the answers into a computer programmed to: 1) store the answers in the form of 

the attributes of the risk event, 2) map each answer to a list of possible event types 
corresponding to each answer, thereby generating a mapped list for each answer, and 3) 
compare the mapped lists to determine an event type of the risk event; and 

taking action based on the determined event type. 

10 

2. The method of claim 1 wherein the computer is programmed to provide a user interface for 
providing the questions to an event reporter, and for receiving the answers to the questions from 
the event reporter, wherein each of the questions have only one answer that can be selected from 
a list of answers for the question, and wherein the selected answer becomes an attribute assigned 

1 5 to the risk event being reported. 

3. The method of claim 1 wherein the computer is programmed to store the answers in the form 
of attributes of the event including, who or what initiated the event, what was the benefit to the 
initiator, who or what was impacted by the event, the nature of the impact, and the initiator's role 
in the event. 

20 4. The method of claim 1 wherein the taking action comprises taking action based on a statistical 
analysis of past typed events, including the risk event. 

5. The method of claim 1 wherein the taking action comprises taking preventive steps to reduce 
events of the event type. 
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6. The method of claim 1 wherein the step of providing questions further comprises providing a 
question regarding who or what initiated the event. 

7. The method of claim 1 wherein the step of providing questions further comprises providing a 
question regarding what was the benefit to the initiator. 

5 8. The method of claim 1 wherein the step of providing questions further comprises providing a 
question regarding who or what was impacted. 

9. The method of claim 1 wherein the step of providing questions further comprises providing a 
question regarding the nature of the impact of the event. 

10. The method of claim 1 wherein the step of providing questions further comprises providing 
10 a question regarding the initiator's role and level of responsibility and legal duty in the event. 

11. The method of claim 1 wherein the computer is programmed to map each answer to a list of 
possible event types that include one or more of the following event types: theft/fraud, 
unauthorized trading, information security, personal safety, employee relations, 
diversity/discrimination, natural disaster, terrorism/political, malicious damage, disclosure 

1 5 suitability & fiduciary, improper business practices, tax violation, advisory actions, sponsorship 
& selection, regulatory monitoring / reporting, transaction processing, client account error, 
system failure, vendor dispute, and event type "unknown". 

12. The method of claim 1 wherein the risk event comprises one of the events selected from the 
20 group consisting of third party theft, employee theft, third party fraud, employee fraud, natural 

disaster, physical injury, illegal action by and employee, illegal action by the organization, and 
failure to take a required action. 
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13. A computer-assisted method of categorizing a risk event comprising the steps of: 

providing questions to solicit answers that define attributes of the risk event; 
obtaining the answers to the questions; 

inputting the answers into a computer programmed to: 1) store the answers in the form of 
the attributes of the risk event, 2) map each answer to a list of possible event types, 
thereby generating a mapped list for each answer, and 3) compare all of the mapped lists 
to determine an event type of the risk event; and 

displaying the event type. 

14. A system for typing risk events comprising: 

a computer programmed for event typing; 

a user interface for posing questions regarding an event to an event reporter, and for 
receiving responses to the questions from the event reporter, each of the questions having 
only one answer that can be selected from a list of answers for the question, wherein the 
selected answer becomes an attribute assigned to the event being reported; 

a look up table to generate a list of mapped possible event types for each answer; 

wherein the programmed computer selects one or more event types common to the lists 
of mapped possible event types, and a user of the system takes an action based on the 
event type presented by the system. 

15. The system of claim 14 further comprising a non-volatile memory. 
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16. The system of claim 15 wherein the memory records the attributes associated with the 
event. 

17. The system of claim 15 wherein the memory records events, attributes and statistics 
5 regarding recorded event types. 

18. The system of claim 14 wherein the questions comprise one or more questions regarding the 
event selected from the group of questions consisting of: who initiated the event, what was the 
benefit to the initiator, who was impacted, what was the damage to the impacted party, and what 

10 was the initiator's role / responsibility regarding the impacted party. 

19. The system of claim 14 wherein the possible event types for each answer comprise one or 
more event types selected from the group of event types consisting of: theft/fraud, unauthorized 
trading, information security, personal safety, employee relations, diversity/discrimination, 

15 natural disaster, terrorism/political, malicious damage, disclosure suitability & fiduciary, 

improper business practices, tax violation, advisory actions, sponsorship & selection, regulatory 
monitoring / reporting, transaction processing, client account error, system failure, vendor 
dispute, and event type "unknown". 

20 
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